The Realm Configuration HOW-TO doc ( http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html <http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html> ) says that: "Once a user has been authenticated, the user (and his or her associated roles) are cached within Tomcat for the duration of the user's login." and "for BASIC authentication, that means until the user closes their browser"
We use basic authentication for web services. I'd like to flush the cache when the password is changed. I've been looking through the doc and code and I've not yet found the cache or a way to flush it. Anyone know where it is?
